Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
File: YsuMEjOwFrHwSBCJc9asPnYvY-0.mft (raw, json)
Hash identifier: LOAHMpxpvtE1T+27ZmAPh/5MWoif4gNanm2xfhleclA=
Subject key identifier: 8E:FE:07:20:79:31:3E:FB:8E:11:6C:7E:67:05:28:60:5A:D1:FE:57
Authority key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
Certificate issuer: /CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Certificate serial: 0196C1CBA5B30FF8A25A16AF71B3BA9D4DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
Manifest number: 10DE
Signing time: Mon 12 May 2025 00:01:10 +0000
Manifest this update: Mon 12 May 2025 00:01:10 +0000
Manifest next update: Tue 13 May 2025 00:01:10 +0000
Files and hashes: 1: YsuMEjOwFrHwSBCJc9asPnYvY-0.crl (hash: ORJxbqfUBPl3VEJTkM8la0TBRF5/B7lxZIcLPAB308I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:a5:b3:0f:f8:a2:5a:16:af:71:b3:ba:9d:4d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Validity
Not Before: May 12 00:01:10 2025 GMT
Not After : May 13 00:01:10 2025 GMT
Subject: CN=8efe072079313efb8e116c7e670528605ad1fe57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:64:89:c4:38:7c:b2:e0:53:d4:21:ab:b0:
8d:a3:87:62:3c:f7:0f:26:f7:53:ec:80:c3:c3:b0:
27:f4:94:d8:99:52:80:77:d6:b9:f5:37:e6:09:dd:
d4:51:8a:2c:92:0e:b9:70:79:73:36:00:04:30:ed:
96:48:c3:f9:64:49:c5:60:b5:7f:7e:ef:f3:99:17:
ef:86:7a:bd:ed:f1:ea:f2:b3:84:ed:51:04:2c:62:
a8:e0:7d:c8:1c:f4:da:8e:b4:96:42:bb:14:3c:87:
4e:60:f3:fd:1d:ae:f1:af:c0:1f:b2:d7:66:77:1a:
68:85:c3:60:0b:16:4e:ca:ec:0b:37:bd:a7:e2:32:
1d:1b:c0:59:08:29:c4:c5:d8:f0:ec:b5:12:02:20:
20:e5:47:71:9e:04:8b:1e:a0:a7:2b:5a:f0:ce:25:
61:b8:90:22:e1:c1:5d:cf:11:41:fd:45:a2:68:e8:
36:c2:c6:81:3c:1b:41:b5:fe:66:99:96:97:75:f6:
73:29:eb:55:00:42:a4:0b:91:1f:da:c7:06:eb:4d:
71:0b:46:ab:27:43:cf:eb:fe:b0:8f:d1:4a:74:d0:
eb:c3:07:90:16:7c:58:3d:8a:77:2a:72:89:ea:e3:
65:25:47:92:4f:1c:65:84:c5:46:bb:85:ce:bf:b8:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FE:07:20:79:31:3E:FB:8E:11:6C:7E:67:05:28:60:5A:D1:FE:57
X509v3 Authority Key Identifier:
keyid:62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e9:d5:6a:ae:99:16:31:4b:06:b9:95:4e:27:dd:d2:62:8b:
b1:8f:85:39:84:2b:fa:9f:d0:89:70:a1:89:7a:e9:60:fb:98:
bd:d2:ea:15:b9:c8:04:ab:24:4f:dd:9c:06:67:5b:9f:46:2c:
c0:3a:dd:15:a7:34:81:80:e6:3f:ef:7a:2d:a0:9c:c1:14:92:
0d:29:5d:0b:e9:ad:74:97:80:78:a9:b3:a6:0e:c2:ee:84:e7:
d7:2a:bd:f8:67:c0:91:74:e3:83:c9:ea:1b:41:06:e6:fe:3d:
ae:27:81:ac:ab:ed:53:28:23:77:8e:7d:69:4d:9d:28:3f:c8:
23:fd:c3:de:38:83:48:9c:c0:ac:02:fe:7d:8f:f6:92:c2:77:
72:b1:0d:98:6c:c2:6e:77:6a:cd:c8:9b:52:5c:1e:7c:bb:10:
52:bc:62:c4:5f:6e:99:2f:9a:de:3d:38:04:af:75:11:b7:07:
8a:b0:af:16:bd:8b:3e:a9:72:7f:cd:f5:d8:55:b6:8e:38:86:
f3:ca:59:f2:04:7f:a2:b6:15:77:88:60:94:ab:2f:9f:18:cd:
b5:5f:c2:ab:93:26:2a:3f:d0:d5:81:0f:d6:96:af:dc:54:57:
e0:2d:5a:fd:f4:b4:fb:d3:b2:8c:66:10:ec:36:ef:45:25:53:
cd:c3:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:34:57 2025 by rpki-client